Privacy Policy

Controller: Renew Reminder is the controller and responsible for your personal data.

Contact Details: If you have any questions about this privacy policy or our privacy practices, please contact us at support@renewreminder.com.

Renew Reminder does not show you advertising inside the app. Earlier versions of our mobile app displayed ads through Google AdMob. That was removed, and we have no plans to bring in-app advertising back.

We do advertise our own app, and we measure whether those ads work. When you install the app after seeing one of our ads, our measurement partner AppsFlyer records which campaign brought you, so we can tell which advertising is worth paying for. This means the app shares a device identifier and install and subscription events with AppsFlyer, and AppsFlyer shares the result with the advertising platform the ad ran on.

On iOS, the app asks for your permission through Apple's App Tracking Transparency, and Apple's advertising identifier (IDFA) is collected only if you allow it. If you don't, measurement uses Apple's own privacy preserving attribution instead. Everything in the app works the same whichever you choose, and you can change your answer at any time in iOS Settings, under Privacy & Security then Tracking. On Android, the app does access Google's Advertising ID for this purpose. You can reset or delete that identifier at any time in your Android settings, under Privacy then Ads.

We do not sell your personal data. We do not build advertising profiles about you, and we do not use anything you track in the app - your subscriptions, bills or spending - for advertising. What is shared for measurement is limited to whether an install and a subscription happened, and which campaign preceded it.

On this website, we use Google Analytics to understand which pages are useful, and Google AdSense serves ads on some pages. Both are managed through the cookie banner, where you can decline them. Neither runs inside the app.

Connecting a bank account is entirely optional. The app works without it, and you can add every subscription by hand.

If you do connect an account, we use Plaid to establish the connection. You enter your banking credentials directly with Plaid — we never see them and never store them. Plaid returns a secure token that lets us read your account and transaction information; it does not allow us, or anyone else, to move money.

We use the transaction data we receive for one purpose: to find recurring charges so we can suggest subscriptions for you to track and warn you before they renew. Plaid's handling of your data is governed by its own End User Privacy Policy.

You can disconnect a bank at any time from the Accounts screen. Doing so revokes our access at Plaid and removes the connection.

Remi is the assistant inside the app that can answer questions about your subscriptions and add them for you. Using Remi is optional.

What is sent to AI providers: when you send Remi a message, the message, relevant details of the subscriptions it needs to answer you, and any file or image you attach are sent to an external AI model provider to generate the reply. We reach these providers through OpenRouter, which routes the request to the model in use.

Voice input: when you dictate to Remi, your device converts speech to text on the device itself so you can see your words as you speak. The recording is then sent once to a speech-to-text service to produce a more accurate transcript, and is not retained afterwards.

Conversation history: we store your conversations with Remi, and a mathematical representation of them, so that Remi can recall earlier context and remember preferences you have told it. You can delete a conversation at any time.

We do not use your conversations, your financial data or your documents to train AI models.

Renew Reminder can find subscriptions and bills in your email, in one of two ways. Both are optional and off until you turn them on, and the rest of the app works without either.

Forwarding address: you get a personal address ending in @inbox.renewreminder.com. We only receive email that you forward to it, or that you set your email account to forward automatically. Forwarded email is received through Resend, which keeps a copy for a limited period under its own retention policy. To stop strangers using your address, email from a sender you have not verified is held instead of scanned: we keep only its sender and subject so you can decide what to do with it, and delete those after 7 days.

Turning forwarding off: you can pause or delete your forwarding address at any time from the app or the website.

Connecting Gmail: how we handle Google user data

If you connect a Gmail account, we ask Google for one permission only: read-only access to your Gmail (gmail.readonly). We do not ask for anything else in your Google Account. This part of the policy explains what we access with that permission, how we use it, who we share it with, how we protect it, and how long we keep it.

Google user data we access. Only email that matches what you chose when you set Gmail up: either email from the senders you picked, or email that looks like a purchase, receipt, invoice or renewal notice. We look back over a limited period (normally the past 12 months, never more than 24), and we skip your sent mail, drafts, chats, spam and trash. From that email we read:

• your Gmail address, so we can show which account is connected;
• the results of a search of your mailbox for the email described above, and a marker from Gmail that lets the next check look only at new email;
• for each matching email: the sender, the subject, the date, the message ID, its Gmail labels and the short preview Gmail shows in your inbox;
• only for email that is likely to be a bill: the text of the email and of any PDF attached to it (up to 5 MB).

We never send, delete, change or label your email, and this connection gives us no access to your contacts, calendar, Google Drive or any other Google data.

How we use it. Only to provide this feature to you:

• to find receipts, invoices and renewal notices, and read from them the merchant, amount, currency, date, billing cycle and, if the email prints it, the last four digits of the card that was charged;
• to show you what we find as suggestions. Nothing is added to your account until you confirm it;
• when you ask us to suggest senders, to list who sent the purchase email in your inbox over the past year (we read only the sender for this);
• to avoid showing you the same bill twice, including a bill you also forwarded to us;
• to check for new bills automatically, about every six hours, and whenever you ask us to check now.

We do not use Google user data for advertising, to build a profile of you, or to make any decision about you, and we do not use it to develop, improve or train AI models, whether ours or anyone else's. We do not sell it.

Who we share it with. We do not sell or rent Google user data, and we do not share it with advertisers or data brokers. It reaches only these kinds of service provider, and only to run this feature:

• AI processing — to decide whether an email is a bill, its sender, subject and preview are sent to an AI model provider through OpenRouter, which routes the request to the model. For an email that is likely to be a bill, the text of the email and of its PDF is sent the same way, to read out the details listed above. We set these requests so that they can only be handled by providers that do not keep the data and do not use it for training.
• Hosting and storage — the server our service runs on, and our database provider, MongoDB Atlas, which stores what we keep (described below) for us.

Beyond these, we transfer Google user data only if the law requires it, to protect the security of our users or our service, or as part of a merger, acquisition or sale of our business, and in that last case only after asking for your explicit consent. No person at Renew Reminder reads your email, unless you ask us to look at a specific email, it is needed for security or to investigate abuse, or the law requires it.

How we store and protect it.

• The text of your emails and attachments is read in memory and is not saved to our database.
• The access Google gives us is held only in memory while we check your email. The longer-lived token that lets us check again later is encrypted (AES-256-GCM) before it is saved, with a key kept separately from the database. If that key is missing, Gmail connect turns itself off rather than save the token unencrypted.
• Data travels only over encrypted connections (HTTPS/TLS), between you and us and between us and Google, our AI providers and our database. Our database provider also encrypts the data it stores.
• Our logs never contain your tokens, or the sender, subject or text of your emails.
• Access to our production systems is limited to the people who run the service.

How long we keep it.

• Email text and attachments: not kept. They are discarded once the details have been read.
• Your Gmail address and the encrypted token: until you disconnect Gmail or delete your account. If you remove our access in your Google Account, we delete the token the next time we try to check your email.
• The log of which emails were checked and the result (sender, subject, message ID and outcome): deleted automatically after 30 days.
• Suggestions waiting for your review (the sender, the subject, the details read out and a one-sentence note on why the email was picked): until you accept or dismiss them, or disconnect Gmail. If you narrow the senders you chose, waiting suggestions that no longer fit are deleted.
• Suggestions you have accepted or dismissed: kept in your history so the same bill is not suggested again, until you delete your account or ask us to delete them. Subscriptions you confirm become part of your account and stay until you delete them.

How to delete it. You can disconnect Gmail at any time in Settings, in the app or on the website. Disconnecting asks Google to revoke our access and immediately deletes the connection, the encrypted token, your waiting suggestions and the log. Deleting your account deletes all of it, including your history. You can also remove our access yourself at any time from your Google Account permissions. To ask us to delete any Google user data we hold about you, email support@renewreminder.com and we will delete it within 30 days.

Google API Services User Data Policy. Renew Reminder's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you share a subscription with other people, everyone on that shared record can see its activity: who has paid their share, reminders between members, and short notes. When you tap "I've paid my share" or write a note, you can also attach one image, such as a receipt or a payment screenshot, so the person who paid the bill can see proof. Attaching an image is optional.

Who can see it: only the people on that shared record. If someone reports the note or payment it is attached to, our moderators can view the image to review the report, and if they hide the line, the image is hidden with it. Images are never public: we keep them in private storage and show them only through links that expire after a short time.

What we do to the image: before storing it, we remove location and other metadata that photos can carry, and we resize and re-compress it. We also keep a smaller copy to show as a preview. We store the images with Cloudflare (Cloudflare R2), which acts as our processor.

Think before you attach: the other people on the record will see the whole image, and they could save it or take a screenshot. Do not upload full card numbers, account numbers, passwords or anything else you do not want them to see; crop or cover those details first.

How long we keep it: an image stays on the shared record's activity until you delete your account. When you delete your account, we delete every image you uploaded. If you choose an image but never send the payment or note, the upload is deleted within 24 hours.